Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa
File:                     69858a09-a524-32a2-bde5-9129a8949dfd.roa (raw, json)
Hash identifier:          GpHHlEDBBw+UvhFPva0I9XE/1Gvkyw1X0H5nseYt4mY=
Subject key identifier:   AF:4D:A8:EE:5B:58:74:84:8F:B4:19:97:E8:56:64:D9:AC:B6:3A:99
Certificate issuer:       /CN=37d983de-280d-4374-a056-b21eb13451dd
Certificate serial:       010D0C9F4328584BC27053C19BD9834E6E1178A0
Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     12107
IP address blocks:        65.183.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:53:c1:9b:d9:83:4e:6e:11:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=921dc980-f4b7-4196-b65f-e730ae296c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:9d:4f:a2:32:37:3e:29:35:3c:1a:ed:77:
                    ca:93:4e:ec:88:4c:6b:34:03:50:f9:ee:ab:13:32:
                    8b:ee:64:ac:cb:b1:28:41:16:c9:ef:9d:bf:f1:32:
                    35:29:dc:a0:af:60:81:8c:fa:5d:41:b8:d0:a9:6c:
                    07:18:ea:ff:5d:64:72:13:34:2d:f7:23:2f:0d:25:
                    7f:39:c1:61:8a:75:b7:c5:d2:d8:c6:dc:9c:a4:c5:
                    2b:39:be:b4:b6:0d:1e:c1:2f:3c:27:be:3e:09:ad:
                    ad:a0:0d:4c:c2:5f:6a:eb:c7:49:e9:5a:13:91:cf:
                    d0:9f:d5:6d:cc:dd:22:a5:91:d2:02:b9:9a:c1:70:
                    79:be:ab:38:33:67:28:31:5f:e2:42:15:cc:8f:a1:
                    50:43:0a:80:dc:a2:5e:d0:e7:ac:6e:ea:e8:99:c2:
                    61:bf:32:b5:ac:b5:bf:bf:e6:a7:c3:63:c4:7f:57:
                    ed:83:a0:c2:03:23:5b:df:c5:7e:e5:4a:e0:66:3b:
                    d4:16:b8:03:4b:34:47:ed:12:de:20:dc:fe:57:5c:
                    c7:4d:0d:f4:5c:a9:de:ac:ba:43:0b:7a:ca:76:58:
                    65:c2:3d:14:a8:48:e0:55:fe:d7:e2:97:3e:61:c2:
                    58:8a:17:f6:21:61:d0:35:7c:9c:36:e8:5f:85:c6:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:A8:EE:5B:58:74:84:8F:B4:19:97:E8:56:64:D9:AC:B6:3A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:67:4a:d5:ec:aa:2f:ea:79:bb:9c:a6:ac:b6:b8:88:65:
         c5:41:3e:2f:57:90:9e:04:e8:61:df:9c:9a:c3:4e:c8:97:0a:
         f5:ce:19:a0:7d:e5:ce:35:ec:2e:01:4d:ea:a5:ac:04:4b:f2:
         3e:93:a8:b6:a9:77:93:c4:c2:90:b9:a2:a3:f6:47:a5:c0:49:
         a7:21:af:c6:ef:1d:68:1e:40:5f:df:58:39:cb:63:e5:f3:39:
         e6:f6:cf:dc:3f:b4:d6:c6:40:0b:75:75:bd:74:a4:3b:07:c4:
         8d:62:3b:85:ca:a2:3e:20:29:a7:d9:47:2b:2f:0d:e2:01:e1:
         cd:b0:14:90:61:a0:08:29:95:ff:2d:9b:0c:f3:09:ce:71:df:
         92:40:8c:4c:75:54:53:44:9f:23:0d:fa:cd:39:4b:00:58:b0:
         c0:ae:fd:63:63:b0:52:a1:86:1a:1c:f8:49:e7:cd:c0:35:37:
         7a:c0:4c:27:dd:d3:b0:99:58:c8:6f:32:69:9d:93:ef:3f:40:
         14:1d:4e:fc:cc:83:c9:26:b3:20:51:16:f4:4e:48:89:3f:40:
         86:a4:40:7c:ed:6a:d0:66:f7:62:54:36:25:33:0a:0f:21:a1:
         65:0b:f1:ea:b4:49:fc:67:67:71:b4:14:31:6d:e2:6d:69:2d:
         12:72:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:18:44 2025 by rpki-client